RA
Vendor
Rankmath
27
CVEs
0
On KEV
2
New 30D
Products
RM9.8
Rank Math SEO PRO
RankMath
1 CVEs0 on KEV1 new
RM8.8
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
rankmath
10 CVEs0 on KEV1 new
SE9.8
Seo
Rankmath
14 CVEs0 on KEV0 new
RS7.2
Rankmath Seo AI Seo Tools TO Dominate Seo Rankings
Rankmath
1 CVEs0 on KEV0 new
SP6.1
Seo Pro
Rankmath
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1928 New | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 8.8 | Oct 28 | Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution |
| CVE-2026-111862 | RM Rank Math SEO PRO RankMath | 9.8 | Oct 19 | Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code |
| CVE-2025-12714 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 5.3 | May 29 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification |
| CVE-2024-13229 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 4.3 | Feb 13 | Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion |
| CVE-2024-13227 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 5.4 | Feb 13 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API |
| CVE-2024-9314 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 7.2 | Oct 5 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection |
| CVE-2024-9161 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 6.5 | Oct 5 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete |
| CVE-2024-4627 | SE Seo Rankmath | 5.4 | Jul 2 | Rank Math SEO < 1.0.219 - Authenticated Stored XSS |
| CVE-2023-23888 | SE Seo Rankmath | 8.8 | May 17 | WordPress Rank Math SEO plugin <= 1.0.107.2 - Local File Inclusion vulnerability |
| CVE-2024-4617 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 6.4 | May 16 | Rank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4335 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 5.4 | May 9 | Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-3665 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 5.4 | Apr 23 | Rank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper' |
| CVE-2024-2536 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 5.4 | Apr 9 | Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes |
| CVE-2023-32600 | SE Seo Rankmath | 5.4 | Aug 5 | WordPress Rank Math SEO Plugin <= 1.0.119 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-32800 | SP Seo Pro Rankmath | 6.1 | May 28 | WordPress Rank Math SEO PRO Plugin <= 3.0.35 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-36376 | SE Seo Rankmath | 9.8 | Sep 9 | WordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerability |
| CVE-2020-11515 | SE Seo Rankmath | 6.1 | Apr 7 | The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured… |
| CVE-2020-11514 | SE Seo Rankmath | 9.8 | Apr 7 | The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke… |
| CVE-2019-14786 | SE Seo Rankmath | 6.5 | Aug 15 | The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter |
